Age | Commit message (Collapse) | Author | |
---|---|---|---|
2012-06-27 | Acl expansions: tests and documentation | Jeremy Harris | |
2012-06-12 | Use custom variables for ACL args, up to nine. Add an arg-count variable. | Jeremy Harris | |
2012-06-12 | Add ${acl {name}{arg}} expansion item. | Jeremy Harris | |
2012-06-12 | Merge branch 'lists' | Jeremy Harris | |
2012-06-12 | Change names to "listnamed" and "listcount". | Jeremy Harris | |
2012-06-10 | Add ${list:name} and ${nlist:string} expansion operators. | Jeremy Harris | |
2012-06-09 | Corrections to spec examples - fixes bug 1196 | Nigel Metheringham | |
2012-06-09 | Typo fix in spec - fixes bug 1197 | Nigel Metheringham | |
2012-06-06 | BUGFIX: forced-fail smtp option tls_sni would dereference NULL | Phil Pennock | |
2012-06-05 | Docs for "G" modifier on numbers in ${if comparisons. | Jeremy Harris | |
2012-06-04 | Basic documentation for cutthrough. | Jeremy Harris | |
2012-06-04 | Add $tls_in_* variables; note the old names as deprecated. | Jeremy Harris | |
2012-06-04 | Add hosts_verify_avoid_tls option to smtp transport. | Jeremy Harris | |
2012-06-04 | Refactor optional MAIL FROM args | Todd Lyons | |
2012-06-03 | Implement -G => "control=suppress_local_fixups" | Phil Pennock | |
fixes bug 1117 | |||
2012-06-03 | Cmdline -L option; also -Ac -Am -X<logfile> | Phil Pennock | |
These are for Sendmail compatibility. bug 1117 | |||
2012-06-03 | ChangeLog: note cyrus plugin use situation | Phil Pennock | |
2012-06-03 | Cyrus SASL: set host;port properties on auth driver | Phil Pennock | |
2012-06-03 | DSCP: inbound via control = dscp/<value> | Phil Pennock | |
2012-06-02 | Docs: pipes in redirect, need for quote caution | Phil Pennock | |
2012-06-02 | DSCP: take numeric values too. | Phil Pennock | |
Also fix doc claim that value is unexpanded. Also strip affix whitespace before numeric conversion and fixed string comparison. | |||
2012-06-02 | DSCP: document; hex print; -bI:dscp | Phil Pennock | |
2012-06-01 | DNSSEC babystep: dns_use_dnssec & $sender_host_dnssec | Phil Pennock | |
2012-06-01 | ACKNOWLEDGEMENTS update, covering a few years | Phil Pennock | |
2012-06-01 | tls_dh_min_bits smtp transport option | Phil Pennock | |
Could not find an API for use with OpenSSL, so GnuTLS only | |||
2012-06-01 | Make -n combine with -bP to inhibit names | Phil Pennock | |
2012-06-01 | Add -bI:help and -bI:sieve | Phil Pennock | |
2012-05-31 | Doc: drop .new/.wen, update previousversion. | Phil Pennock | |
Also, drop fix one place which claimed TLS SNI support was OpenSSL only. | |||
2012-05-30 | Revert "Lower EXIM_CLIENT_DH_MIN_BITS 1024 -> 512."exim-4_80 | Phil Pennock | |
This reverts commit 83f4c7515f3eb06dc070e78edd2694c1d088e5fd. This was not a new check! The call to gnutls_dh_set_prime_bits() was made with DH_BITS in Exim 4.77, so the only difference is that now an administrator can choose at compile time to change the lower bound. So keeping this at 1024 is not a regression and if we can't talk to them now, we couldn't before, and we shouldn't lower security by default. The reverted commit was only acceptable IF it was still better than what we had in Exim 4.77. | |||
2012-05-30 | Lower EXIM_CLIENT_DH_MIN_BITS 1024 -> 512. | Phil Pennock | |
Wolfgang Breyha saw a real-world site using 768 bits. | |||
2012-05-28 | Merge openssl_disable_ssl2 branchexim-4_80_RC7 | Phil Pennock | |
2012-05-27 | Doc: fix glitchexim-4_80_RC6 | Phil Pennock | |
2012-05-27 | Doc: SECTgnutlsparam referencing tls_dhparam | Phil Pennock | |
2012-05-27 | For DH, use standard primes from RFCs | Phil Pennock | |
2012-05-27 | Deal with GnuTLS DH generation overshoot | Phil Pennock | |
2012-05-26 | FAQ for GnuTLS | Phil Pennock | |
2012-05-25 | Doc: Provide context for bare numbers from CHAP/SECT. | Phil Pennock | |
2012-05-25 | Cyrus SASL auth: SSF retrieval was incorrect. | Phil Pennock | |
Exim thought protection layer was required, which is not implemented. Patch from Wolfgang Breyha. Fixes bug 1254 | |||
2012-05-24 | Added some more .gitignore entries | Nigel Metheringham | |
Ignore more build side effects | |||
2012-05-23 | _ISOC99_SOURCE -> _GNU_SOURCEexim-4_80_RC5 | Phil Pennock | |
_ISOC99_SOURCE broke build on Linux (Ubuntu 11.10) because it broke <resolv.h>, <arpa/nameser.h>, etc. Their u_char and u_int usage relies upon BSD source being enabled too. So use _GNU_SOURCE. | |||
2012-05-23 | Define _ISOC99_SOURCE in exim.h | Phil Pennock | |
Done before os.h is pulled in so an OS can override it. | |||
2012-05-23 | Doc: move -bmalware into alphabetic place | Phil Pennock | |
2012-05-23 | Doc: s/DNS/domains/ in new text | Phil Pennock | |
2012-05-23 | Doc: document when dnslookup will decline | Phil Pennock | |
2012-05-23 | Doc: tls_require_ciphers examples | Phil Pennock | |
Note how to test strings, provide examples which distinguish port 25 from other ports. Carefully used short examples, but allows two different strings per implementation and demonstrates how the strings are very different. | |||
2012-05-22 | OCSP description: minor nits | Phil Pennock | |
2012-05-21 | .end -> .wenexim-4_80_RC4 | Phil Pennock | |
2012-05-21 | Add tls_dh_max_bits to OptionLists.txt | Phil Pennock | |
2012-05-21 | features.h; tls_validate_require_cipher: log flag & testsexim-4_80_RC3 | Phil Pennock | |
Pull in <features.h> on Linux. Switch readconf log from D_all (bug) to D_tls (though D_any would have worked). Modified runtest to handle clamped DH bits and tls_validate_require_cipher added debug logging. | |||
2012-05-20 | Update docs for latest state of TLS affairs. | Phil Pennock | |
gnutls-params bits count no longer necessarily what GnuTLS says to use. The OpenSSL-vs-GnuTLS text needed some updating. Catches a ChangeLog addition made during the previous commit, so not picked up by it. |